Hacker News Reader

Apparently (from my colleagues) even the CIS Level 1 benchmark for Windows Server doesn’t actually recommend disabling the print spooler service by default, but that seems to be the common sense approach going forward. If you don’t need a software component, either uninstall it or disable it.

View on HN

If you have a server that is an AD DC, you must at least run one with the print spooler if there is printing anywhere within AD, because that is the only way for AD to prune the spooler.

So you might not need to print on your DC, but your DC needs the spooler so that you can keep your printing system, healthy everywhere else... it's pretty much an indirect requirement.

Reply on news.ycombinator.com